* Involved in client communications, impact analysis and estimation* Writing Alert, creating dashboard & visualization in Kibana for different application logs* Manage Elastic cluster, ILM Policy* Monitor server using Metricbeat* AWS managed cluster (15 data nodes, 2 Kibana, 6 Logstash, 3 master, 6 kafka node)* Gather requirement from application team to ingest new application data like application name, how many data they are generating per day, what are the alert… Show more * Involved in client communications, impact analysis and estimation* Writing Alert, creating dashboard & visualization in Kibana for different application logs* Manage Elastic cluster, ILM Policy* Monitor server using Metricbeat* AWS managed cluster (15 data nodes, 2 Kibana, 6 Logstash, 3 master, 6 kafka node)* Gather requirement from application team to ingest new application data like application name, how many data they are generating per day, what are the alert , dashboard and reporting they are using currently in Splunk* Installed new agent in each application server to redirected new data through filebeat ->Kafka-> Logstash -> into Elasticsearch* Creating ILM policy, mapping for each index Replicated same dashboard, Alert, queries and report which are already build in Splunk into Elasticsearch* Created Machine Learning Jobs from Kibana X-Pack ML component for anomalies detection and to predict KPI Metrics and errors* Integrated Elasticsearch with ServiceNow to create INC ticket with respective team with priority* Build On prem Elasticsearch from start (34 data node, 2 Kibana, 20 Logstash, 3 master node, 2 client node,) * Involved in development and execution of SIEM roadmap activities while meeting current and future regulatory and internal requirements to activate SIEM in ELK* Work with different application teams to understand the different application logs, requirement and manual activities they are performing* Created Visualization, Dashboard, Alert, Search query as per business requirements for each application* Work on configuring APM for Java, Python, Node JS & Ruby application to monitor all end-to-end application activity* Work with cross-functional teams to address business issues like security, Alerting, issue facing in monitoring* Work as primary ELK developer for all in premises & Cloud applications, Servers and Network* Configure Filebeat, Logstash for different application data structured and non structured Show less